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Ameadinegtsto the Claihis 



This listing of 
{^plication; 



claims will replace all prior vcrsioiis, and listings, of claims in the 



Ticrt^pt^fnaliiiS? 

Claim 1 (original): 



A data processing metibiod for processing so that a portable device 
including an integrated cixjuit for storing memory area division data and first area management 



key data, is authorized to 



p^oim at least one of a write operation to a memory area of said 
integrated circuit and a rejsvrite operation to the memory area on the condition that the first area 
management key data makes a second service provider provide a service using part of said 
memory area of said int«;grated circuit whai said portable device is issued by a first Service 
provide providing a servi ce using said memory area, 

.sdd data jxrocessii £ method comjprisixig the steps of: 

having a memorj area operation unit managing said key memory area division data 
encrypt first module data including second area management key data by the key memory area 
. division d»ta, and proyidi ag the same to the first service provider; 

having the issuer of the portable device, \»*ich is said first service provider, encrypt 
second module data iii;luding the encrypted first module data by usiiig sMd first ai*a 
management key data an<i providing the sanxe to said memory area operatioh uni^ and, 

under tixe control of the memory area operation unit, providing ttie enciypted second 
module data to the integrated circuit, decrypting the second module data by iishig the first area 
management key data in the integrated circuit, decrypting the first module data in the decrypted 
second module data by lising Has key memory area division data, and dividing the manorV area 
to a first memory area to be used for the services of the first service provider and a second 
memory area to be used jfor the services of the second service provider by using fhie second area 
management key data objudned firom ttie decryption of the data. 
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Claim 2 (original) 
comprising the step of having 
area wherein at least cm 
condition that the first area 
least one of a write operiti< 
second area management iffy 



i.integraed 
d^ta 



Claim 3 (origijaal) 
comprising: 

having thei 
of a write operation of 
atea on the condition the 

havmg the memory 
system key data by the 
provider, 

having ttie first 
module data and division 
area for use by another 
providing it to the memoijy 

having the inl 
management key data, 
key memory area division 
data, second area 
decrypting the data. 



A data prx>cessmg method as set fortii in claim 1, further 
the integrated circuit divide the memory atea into the first memory 
of a write operation and a rewrite operation is authorized on the 
management key data is used and the second memory area wherein at 
ion and a rewrite operation is authorized on the cdnditibn that the 
data is used. 



A data processing method as set forth in claim 1, further 



circuit farther store first system key data and authorize at least one 
to the memory area and a rewrite operation of data iii the memory 
first system key data and the first area management key d^ are used; 

area operation unit encrypt first module data fiulher including second 
key memory area division data and provide the same to the first service 

sefvice provider encrypt second module data including the ^crypted first 
condition infbmxation indicating the condition for dividiD(g the memory 
service provider by using the first area management key diita and 
area op^ation uoit; and 

circuit decrypt the second module data by using the first arfea 
the firct module data in the decrypted second module by using the 
data, and divide the memory area by using the secoiid system key 
key data, and division condition information obtained by 



defcrypt 



management 
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.Claim4(origiiial)^ A data processing method as set forth in claim 1, further 
comprising 

providing a memo y area division apparatus for dividing said memory area to said second 
service provider under the control of said memory area operation unit and 

having said.memcry area division apparatus provide said encrypted second module data 
to said integrated circuit.. . 

Claim s (original) A data processing method as set forth in claim 2, providing a 
plurality of third memory areas defined in said second memory area and third area management 
key data used for perforthing at least one of a write operation to the third memory area and a 
rewrite operation in the third memory area defined in each of said third memory areas, 

further comprising the steps of; 

hjKvmg said memory area operation unit encrypt third area ioiaixagemerit key data by 
second area management key data and provide the same to said memory area division s^aratus; 

having said memory area division apparatus providie said* encrypted third area 
management key data to ^aid integrated circuit; and 

having said integirated circuit decrypt said encrypted third area management key data by 
using said second area m anagement key data, establish correspondence with said third rnemory 
areas defibtied in said sec9nd m^ory area to store said tibdbcd area management key, data obtained 
by decrypting the data. 

Claim 6 (original)!: A data processing method as set fortti in claim 5, further 
comprising the step: 

having said memory area operation unit assign a service code for identifying a service 
provided by using the thrd memory area for each of said third memory areas and generate and 
store an area code list iniiicating an area code for identifying said third inemory area, said third 
area nianagement key data coxrespohding to the third memory area, and said service code 
assigned to the corresponding third memory area. 
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Claun. 7 (original) j A data processing mefhod aa set forth in claim 3, &rther 
comprising the steps of: 

providing a mem ory area division apparatus for dividing said memory area for said 
second service provider n ider the control of said memoiy area operation unit; 

having said memciy area division apparatus provide said encrypted $ec6n4 module data 

to said-integrated circuit; 

having said memory area operation unit provide first degenerate key data obtained by 
encrypting the data using said second system key data and said second area management key 
dat^ to said memory area division apparatus; 

having said integrb^ted circuit generate second degenerate key data by ehcrjiiting the data 
using said second system key data obtained by decrypting the data and said second area 
management key data; an 1 . 

performing mutuall authentication between said memory area diviision sqpparatus «aad said 
integrated circuit using s« id first degenerate key data and said second degenerate key data. 
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Claim 8 (original): A data processing method as set forth in claim 6, further 
comprising the steps of: 

having said memoiy area operation unit 

provide an operatic ^n file registxation ^aratus to said second service 

provide said third jrea management key data to said operation file registratibn appamtus, 

and 

establish correspoudence between said service code in said area code hst and said area 
code to provide the same to said operation file registration apparatus; 

having said operation file registration apparams store file registration permission data 
indicating said service coke and file management key data issued by said second service provider 
in correspondence, encrjpt said file registration permission data by using said third area 
management key data, and provide the same to said integrated circuit; and 

.having said integrated. circuit decrypt said file registration permission data by using said 
third area management kpy data and write file data relating to a service of said second service 
provider to said third memory area by using said file mraagement key data m said decrypted file 
registration pennission data. 
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Claim 9 (original): 
comprising the steps of, 

when there are a 
maDiflgemeat key data and 
each of said plurality 

having said memoijy 

receive rejection 
respective service 
provider and said second 

generate a 
service, provider, capable 
service provider based on 



provide!!^ 



regi$tei;abl 



provide the registe rable 

having said memojry 

area of the integrated cirduit 
registerable system code 



Claim 10 (original) 
comprising the step of having 
mem^ory ^ea of said inl 



Claim. 11 (originai) 

comprising the step of 
memory area of said i 



Claim 12 (orij 
portable device is a card. 



A data processing method as set fordi in claini 4, flirther 



plurahty of said first service providers, and said first system 
a system code for identifying said first service provider are added to 
service providers, 
area operation unit 
information that specifies a party fox which provision of services from 
using the same integrated circuit is rejected from said first service 
service provider, 

le system code Ust indicating said system code added to said first 
3f providing a service by said same integrated circuit aA said second 
said rqection inforoiation, and 

system code list to said memory area division apparatus; and 
ry area division apparatus judge whether or not to divide; said memory 
based on said system code stored in the integrated circuit and said 
J ist bP&re dividing said memory area of said integrated circuit. 



: A data processing method as set forth in claim 1, fiirther 
said memory area operation unit pay a fee for using said second 
circuit to said first seacvice providCT. 



Ltegrated 



A data processing method as set forth in claun l> fiirther 
] laving said second service provider pay a jfee for usinjg said second 
inte jrated circuit to said memory area o'j>eration unit. 



ginal): A data processing method as set forth in claim 1, wherein said 
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Claim 13 (original): A data piocessmg system for processing data so that a portable 
device including an integrated circuit for storing key memory area division data and first area 
maixagement key data is authorized to perforai at least one of a write operation to a memory area 
of said integrated circuit and a rewrite operation to the meinory ariaa on the condition that the 
jBxst area management key data makes a second service provider provide a service using part of 
said memory area of 5ai<ji integrated circuit when issued by a first service provider using said 
memory area, wherein tixi system has 

a memory area operation processing ^paratus used by a memory area opemtion unit 
which manages the memc ry area division data, 

a first service pre vider processing apparatus used by the issuer of the portable device 
which is the first service provider, and 

a second service provider processing s^aratus used by the first service provider; 

wherein: 

the memory area operation processing apparatus encrypts first module data including 
second area managementl key data by the memory area division data and sends the same to the 
first service providierpro<«ssingappiaratus; 

the first service p: <>vider processing apparatus encrypts second module data including the 
received encrypted first laodule using the fiirst area management key data and sends the same to 
the memory area operation processing ^aratus; 

the memory area operation processing apparatus provides the received encrypted second 
module data to the integr ited circuit; and 

the integrstted circuit decrypts the second module data by using the first area management 
key data, decrypts the fbrst module data in the decrypted secoiid modiile by using the memory" 
area division data, and divides the memory area to a first memory area to be u$e4 for service of 
the first service provider and a second memory area to be used for service of the second service 
provider usmg the seconii area management key data obtained by fiie decrypting iihe daf a under' 
control of the memory arpa operation unit 
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Claim 14 (original; 



A data processing system as set forfli in claim 13, wherein said 
integrated circuit divides said memory area into said first memoiy area wherein at leiast one of a 
write operation and a rewrite operation is autiioiized on the condition that said first area 
management key data ami said second memory area axe used wherein at leaist one of a write 
operation and a rewrite o] )eration is authorized where said second area management key data is 
used. 

Claim 15 (original): A data processing system as set forth in claim 13, wherein: 
said integcated. circuit ftdther stores first system key data and authorizes at least one of a write 
operation to said memorjj area and a rewrite operation in the memory area on the condition that 
said first system key dats^ !and said first area management key data are used; 

said memory are i operation processing apparatus encrypts first module data fiirther 
including second system key data by said key memory area division data and provides the same 
to. a first service provider [ppDcessing apparatus; 

said first service provider processing apparatus encrypts second module data including 
said encrypted first modiile and division condition tofoimation indicating conditions of dividing 
said .memory area for use of other service providers and provides it to said memory area 
operation unit processing apparatus; and 

said integrated csircuit decrypts said second module data by iiaing said first area 
management key data, decrypts said first module data in fiie decrypted second module data by 
using said key memory area division data, and divides said memory area by usiiig said second 
system key data, seconc area mianagement key data, and said division condition inJBarmation 
obtained by decrypting file data. 
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Claim 16 (origiiial : A portable device mounting an integrated circuit used for a first 
service provider providing a setvice, wherein the integrated drcxiit comprises: 

a memory means ; or storing key memory area division data managed by a memory area 
operation unit performing processing to make a second service provider provide a service using a 
part of a memory area of the integrated circuit and first area maiiagement key data; 

an input means foi inputting a module including second area management key data issued 
by the memory area operition unit which is encrypted by the memory area operation unit using 
the memory area divisioB data and furthermore encrypted by the first service provider by using 
the.first area management key data; and 

a processing means for decrypting the input module by using ihe memory area division 
data and the first area management key data, dividing a memory area of the memory means to a 
first memory area and a ^econd memory area by using the second area management key data in 
the deorypted module, au horizing at least one of a write operation to the first memory area and a 
rewrite operation in the memory area on the condition that the first area management key data is 
used and authorizing at Ibast one of a write opemtion to the second memory area and a rewrite 
operation in the mraiory, krea on the condition that the second area manageirient key data is us6d. 



. . Claim 17 (original) 
means authorizes a write 
first memory area on 
authorizes a write 
memory area on the 



the 



; operatfon 



A portable device as set forth in claim 16> wherein said processing 
operation of a file used for processing of the processing means iii said 
condition that said first area management key data is lised and 
of a file used for processing of the processing means in said second 
condition fiiat said second area mana^ment key data is used. 
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Claim 18 (original i: A portable device as set forth in claim 16, whereih: 
said memory mear s further stores first system key data; 

said input means receiyes as an input, said module further including second system key 
data; and 

said processing means uses said second system key data and said [ second area 
said decrypted module to divide the memory area of said memory 
meajos to said first memoiy area and said second memory area, authorizes at least one of a write 
operation to said first memory area or a rewrite operation in the memory area on the condition 
that said first system key data and said first area management key data are used, and authorizes at 
least one of a write opers tion to said second memory area or a rewrite operation ui the memory 
area on the condition that said second system key data and said second area management key 
data are used. 
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i 

CJaiml? (original): A data ^aocessmg apparatus jfor processmg data so that a por^^ 
device including an integrated circuit Jbr storing distribution key data, a system code for 
identiewg a first, service provider, and first area management key data which is authorized to 
perfonn at least one of a 4rite operation to a memory area of said integrated circuit and a rewrite 
operation to the memory sirea on the condition that the first area managenieDt key idata makes a 
second service provider |>rovide a service using part of said memory area of said integrated 
circuit when issued by a service provider providing a first service using said memory area, 
vfbeKAn 

the ^aratus has a memory meaiis, processing means, and input/ouiput means; 

the memory meaop stores rejection information specifying a service provider which can 
provide service by the same integrated circuit indicated by the first service provider and the 
second so^ice provider, 

flje processing me^ enarypts a first module including second managonent key data by 
using the key memory arqa; divisioji diata; 

the ii]5)Ut/output n «aiis outputs tiie encrypted first module to provide it to the first swvice 
provider, receives as ii^n it a second module including the encrypted first module and encrypted 
in the first service provider by using the first area xnanageinent key data, and outputs the second 
module to provide it to J i memory area division ^?paratus fiw dividing the memory area under 
control ofthe .second ser doe. provider so that a part of the memory area of the integrated circuit 
can be used by fl&e secona service provider; 

tile processing means generates a reg^sterable sjretem code list indicatiiig the systciin code 
added to the &cst service provider which can provide service by tibie same iiitegraied circuit as the 
second service provider I lased on tiie rejection information; and 

Ae mput/output jneans outputs the system code list to provide it to the manory area 
division apparatus. j 
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memory 



OB 



Claim 20 (ori^al] 

when said memory 
circuit into said first 
operation is authorized 
said second memory area 
authorized on the conditio^ 

said processing 
issues third area 
the third memory ax?a anc. 
of third memory areas 
management key data; 

said input/output 
provide it to said memory 



means 



management 



ajid 



and 



Claim 21 (original) 
processing means, issues 
memory area for each of 
area code for 
coirespondjng to the thir< 
in correspondence; and 

said memory means 



Claim 22 (originaa; 
input/output means estabUshes 
list and said service cod^ 
writing file data used foi 
said integrated circuit. 



A data processing apparams as set forlh in claim 19, wherein 
area division apparatus divides said mCTaory area of sdid integrated 
area wherein at least one of a write operation and a rewrite 
the condition that said first area management key data is used, and 
wherein at least one of a write operation and a rewrite operation is 
that said second area management key data is used; 

defines a plurahty of memory areas in said second memory area, 
key data used for performing at least one of a write operation to 
a rewrite operation in said third memory area for each of said plurality 
encrypts the third area management key data by said second area 



means ou^uts said encrypted third area management key data to 
area division apparatus. 



A data processing apparatus as set jforth in claim 20^ wherein said 
a service code for identifying a service provided by i^ing the third 
said third mfemory areas and generates an area code list indicating an 
identifying said third memory areas, said third area manigement data 
m^ory area, and said service code assigned to the third memory area 



stores said area code list 



[): A data processing apparatus as set forth in claim 21, wherein i^d 
correspondence between said area code included in said area code 
and outputs the same to provide it to a file registration apparatus for 
a service of said second service provider hot said third memory area of 
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Clairo 23 (origmal) : A data processing ^aratus for processing data so that a portable 
d^cc imclijdmg ra^^^i^^^ fcr storing distribiition key data, a syst^ cod6 for 

identifying a first service provider, and first area management key data which is authorized to 
perform at least one of a v xite operation to a memory area of said integrated circuit and a rewrite 
opeiation.to the xnemoiy .area on the condition, that.the first area management key data makes a 
second service provider irrovide a service using part of said memory area of said integrated 
circuit when issued by a jferst service provider providing a first service using said memory area, 
wherein the apparatus has a memory means, input/output means, and processing means; 

the memory meank stores a module including second area management key data issued 
by a memory area operation unit for managing processing of the data processing apparatus aad 
enaryptcd by the memorjr area operation unit using the key memory area division data and a 
registerable system code ijist indicating the system code added to the first service provider which 
can provide service by thd same integrated circuit as the second service provider; 

the input/output ijleans. receives as input the system code from the integrated circuit; and 

.the prooessipg irifaus outputs the module to the integrated circuit via the input/output 
means when it judges thai: the ii^ut system code is indicated in the registerable system code hst 
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area 
sad 



of 



... Claim 24 (original) 
data in a second memory 
one of a write operation 
authorized on the condition 
area wherein at least one 
• providing a second servic^ 
is used, 

when a plurality 
memory management key 
third memory area and a 
the plurality of third 
key data, 

said data proce5sii{£ 

. a.mempiy zn^^n^. 
the. second service providlpTj 
encrjpted by the flbi^d 
an output means 
a writing means 
second memory ar^a of the 



imempry 



area 



for 



A data processing apparatus for performing processing to write file 
of an integrated circuit having a first memory area wherein at least 
rewrite operation of file data used for providinjg a fiirsf Service is 
that first area management key data is used and a sedond memory 
of a write operation and rewrite operation of file d!ata used for 
is ftulhorized on the condition tbfat second area management key data 



third memory areas are defined in the second ihcanory area> third 
data used for performing at least one of a write operation of data to a 
rswrite operation of data in. the third memory area is defined for each of 
areas, and said integrated circuit stoires said third area managemeiit 



£q>paratus, comprising: 
storing third area management data and file key data whiclj is issued by 
■j.used at flie time of writing the file data to a third memory area, and 
management key data; 

outputting tJxe encrypted file key data to the integrated circuit; and 
writing file data to be used for providing the second service to the 
integrated circuit by using the file key data. 



for 



PAGE18QS'RCVDAT11/10/2005 4:16:22PM[Ea^^^^ 

BEST AVAILABLE COPY 



BELL BOYD & LLOYD LLC Fax: 31 28278000 



Nov 10 2005 15:22 



P.18 



ApplNo. 10/018.440 
Reply to Office Action of August 1 



(},2005 



management 



. Claim 25 (original) 
issuing a portable 
data and fii^t area 
memory area in said i 
condition that the first 
. . . requesting a. 
divide the memory area 
write operation and re- 
first area management 
operation and a rewrite 
second area management 



A portable unit issuing method comprising the steps of: 
jmit including an integrated circuit for storing meimory ^a division 
key data and authorizing at least one of a write operation to a 
Migrated circuit and a rewrite operation in &e memory area on the 
management key data is used and 

area operation unit managing the memory area division data to 
the integrated circuit to a first memory area wherein at least one of a 
operation in the memory area is authorized on the condition that the 
data is used and a second memory area wherein at least one of a write 
cperation in the memory area is authorised on the cohditioh that the 
cey data is used by using the memory area division data. 



are^ 



memory 



wriite 



kej 



aaim26(origiiial 
wherein said portable uniii 



^: A method of issuing a portable unit as set forth .in claim 25, 
is a integrated circuit card. 
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;part 



Clairo 27(cuiTetttl^ 
for making a computer 
circuit for storing memqjfy 
proyider, and first area 
write.operation to a memoary 
area on the condition that 
piDvide a service using 
service provider providiqig 
computer execute 
ai:outinefpr 
a routine for 
to the first service provide 
second service provider 
legist^rable system code 

a routine. .for 
management data issued 
and ^crypted by ttie 
and Either encrypted by tiie 
when judging that the i 



amended): A program stored in a c omputer readable medium 
execute processing so ttiat a portable device including an integrated 
area division data, a system code for idcntifyiiig a first service 
inlanagement key data which is authorized to perform at least one of a 
area of said integrated circuit and a rewrite operation to the memory 
the first area management key data makes a second service provider 
of said memory area of said integrated circuit when issued by a first 
a first service using said memory area, comprising making the 



' receiving 
referring 



^raput 



as input the system code from the integrated circuit; • 
to a registerable system code list indicating the systdm code given 
which can provide a service by the same integrated circuit as the 
and judging whether the input system code is indicated in the 
list; and 

to tfie integrated circuit a module including second area 
by a memory area operation unit managing execution of the program 
area operation unit by using the key memory area; division data 
first service provider by using the first area management key data 
system code is indicated in flic registerable system code list. 



memory 
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Claim 28 (cuirenttyj amended): A data processing method for processtog so that a 

portable device inpluding aa inte^ated dbrcuit for storing distribution key date, a system code for 

. identifying a first service provider, and first area management key data winch is authorized to 
perform at least one of a vvjrite operation to a memory area of said integrated d 
. . operation to the memory area on.the condition that the first area management key dala makes a 
second service provider irovide a service using part of said memory area of said integrated 
circuit when issued by a i ist service provider providing a first service using said memory area, 
conxprising: 

a^Fe«&»«finputling the system code fifom the integrated circuit; 

g routine ofrcfanrtn£ to a registerable system code hst indicating the system code given 
to the first service provider which can provide service by the same integrated circuit as the 
second service provider and judging whether the input system code is indicated in the 
registocable system code list; and 

g routino of -outytting to the integrated circuit a module including second area 
management data issued |by a memory area operation unit managing execution of the program 
and encrypted by the memory area operation unit by using the distribution key data and further 
encrypted by flie firet serUce inovider using thb first area management key date when it judges 
that the input system code is indicated in tihe registerable system code list. 
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Claim 29 (currentl; 



amended): A program stored in a «>^f"»«r rRaHable medium 



for making a computer e}i!ecute processing for writing file data to a second memoty area of an 
integrated circuit haying a firat memory area wherein at least one of a write operadob and rewrite 
operation of file data use<l for providing a first service is autiiorized on fee condition that first 
area managemeut key data is used and a second memory area wherein af least ope of a write 
operation and rewrite operation of file data used for providing a second service is authorized on 
the condition feat second area management key data is used, said program comprising: 

a routine of outpu ting to fee integrated circuit file key data which is issued by a second 
service provider, used at ' he time of writing fee file data in a third memory area, and encrypted 
by a third area management data when a plurality of third memory areas are defined in fee 
second memory area, a fe brd memory management key data used for performing atleast one of a 
write operation to a. feird meooioiy area and a rewrite operation in fee third memory area is 
defined fiw. eaph.QC fee pj aiali^ of tbaid memory areas, and the integrated circuit stores fee third 
area manageneot key dat i; and 

a routine of writii g file data used for providing fe© second service in fee second memory 
area of fee integrated circ nit by using fee file key data. 
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Claim 30 (currentlj 
processing for writing file 
memory area wberem at 
providing a first service 
used and a second memorV 
file data used for providing 
management key data is 

a routino of putputting 



least i 



managemmt 



thSid 



10 



service provider, used at 
by a third area 
second memory area, a 
write operation of data 
memory, area is defined 
stores the tliird axeamani 

a routin e-ef-writii] j 
area of the integrated 



cixciit 



amended): A data processing method for * performing 
data to a second memory area of an integrated circuit liaving a first 
one of a write operation and rewrite operation of file data used fior 
authorized on the condition that first area management key data is 
area wherein at least one of a write operation and rewrite operation of 
a second service is authorized on the condition that second area 
.comprising: 

to the integrated circuit file key data which is issued by a second 
' he time of writing the file data in a tMrd meiiibiy area, and encrypted 
data when a plurality of third memory areas are defijaed in the 
memory management key data used for performing at least one of a 
a third memory area and a rewrite operation 6f data in the third 
each of the plurahty of third ihcmory areas, and the integrated circuit 
la gement key data^ and 
g file data used for providing the second service in the second memory 
by using the file key data. 



PA(£23l2S'RCVDAT11i10/2(M)54:16:22PM[Eastem Standard r^^^ 



BEST AVAILABLE COPY 



